Privacy policy

Last updated: August 11, 2026

Fett Burger Art, owned and operated by Peter Mitterer, Wiener Straße 40, 10999 Berlin, Germany ("Fett Burger Art", "we", "us"), operates this store and website, including all related information, content, features, tools, products and services (the "Services"). Fett Burger Art is powered by Shopify, which enables us to provide the Services to you.

For the purposes of the EU General Data Protection Regulation (GDPR) and other applicable data protection laws, the data controller is:

Peter Mitterer (Fett Burger Art) Wiener Straße 40, 10999 Berlin, Germany Email: djfettburger@gmail.com

This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make a purchase, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Personal Information We Collect

"Personal information" means information that identifies or can reasonably be linked to you. Depending on how you interact with the Services, we may collect:

  • Contact details including your name, address, billing address, shipping address, phone number and email address.
  • Payment and transaction information including payment card details, form of payment, payment confirmation, the items you view, put in your cart, purchase, return or cancel, and your past transactions. We do not see or store your full payment card numbers; these are processed directly by our payment providers.
  • Account information including your username, password, preferences and settings, if you create an account.
  • Communications with us including the content of emails or messages you send us.
  • Device and usage information including information about your device, browser, network connection, IP address and how you interact with and navigate the Services, collected through cookies and similar technologies.

We collect this information directly from you, automatically through the Services (including cookies), and from our service providers when they collect or process it on our behalf.

How and Why We Use Your Personal Information (Legal Bases)

Under the GDPR, we only process your personal information where we have a legal basis to do so:

  • Performance of a contract (Art. 6(1)(b) GDPR): to process your orders and payments, arrange production and shipping, provide order updates, manage your account, handle returns and withdrawals, and provide customer support.
  • Legal obligations (Art. 6(1)(c) GDPR): to comply with commercial, tax and accounting laws (for example, retaining invoices), and to respond to valid legal requests.
  • Legitimate interests (Art. 6(1)(f) GDPR): to secure the Services, prevent fraud, defend legal claims, and operate and improve our store, provided your interests and fundamental rights do not override these interests.
  • Consent (Art. 6(1)(a) GDPR): where we ask for it, for example for non-essential cookies or email marketing, if used. You may withdraw consent at any time with effect for the future.

We do not use third-party marketing or analytics tools beyond the functionality natively provided by Shopify.

Who We Share Personal Information With

We disclose personal information to third parties only for legitimate purposes and subject to this Privacy Policy:

  • Shopify (Shopify International Ltd. / Shopify Inc.), which hosts our store and processes orders, payments (Shopify Payments) and store data on our behalf.
  • Print and fulfillment partners, in particular Gelato (Gelato ASA and its production network), which receive your name, shipping address and order details in order to produce and ship prints ordered by you.
  • Payment providers, in particular Shopify Payments and PayPal, which process your payment. Your payment data is handled by these providers under their own privacy policies.
  • Shipping carriers, in particular DHL, which receive your name, address and, where needed, contact details to deliver your order.
  • Professional advisers and authorities where required to comply with legal obligations, enforce our terms, or protect or defend our rights and those of others, including in connection with a business transaction.

We do not sell your personal information.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit to the Services will be transmitted to and shared with Shopify and third parties that may be located in countries other than where you reside. To help protect and improve our business, we use certain Shopify enhanced features that incorporate data obtained from your interactions with our store, with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to your requests to exercise your rights over the use of your personal information for these purposes. To learn more, see the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/customers, and the Shopify Privacy Portal at https://privacy.shopify.com/en.

Cookies

The Services use cookies and similar technologies provided through Shopify. Essential cookies are required to operate the store (for example, keeping your cart and enabling checkout) and are used on the basis of our legitimate interest in providing a functioning store. Where non-essential cookies are used, they are used only with your consent, which you can manage via the cookie settings on this website.

International Transfers

We may transfer, store and process your personal information outside the country you live in, including outside the European Economic Area. Where we transfer personal information out of the EEA or the UK, we rely on recognized transfer mechanisms such as adequacy decisions of the European Commission or the European Commission's Standard Contractual Clauses (or UK equivalents), unless the destination country has been determined to provide an adequate level of protection.

Retention

We retain personal information only as long as necessary for the purposes described above. Order, invoice and transaction data must be retained for the periods required by German commercial and tax law (up to ten years). Other information, such as customer service correspondence, is kept only as long as needed to handle your request, resolve disputes and enforce applicable agreements.

Security

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details below to request that it be deleted.

Your Rights

Subject to the conditions and exceptions of applicable law, you have the right to:

  • Access the personal information we hold about you (Art. 15 GDPR);
  • Rectification of inaccurate personal information (Art. 16 GDPR);
  • Erasure of your personal information (Art. 17 GDPR);
  • Restriction of processing (Art. 18 GDPR);
  • Data portability: receiving a copy of your data in a structured, commonly used format (Art. 20 GDPR);
  • Object to processing based on legitimate interests, including any direct marketing (Art. 21 GDPR);
  • Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

You can exercise these rights by contacting us at djfettburger@gmail.com. We may need to verify your identity before processing your request. We will not discriminate against you for exercising any of these rights. For data processed by Shopify as described above, you can also exercise rights via the Shopify Privacy Portal.

If you opt in to promotional emails, you can opt out at any time using the unsubscribe link in those emails; we may still send you non-promotional emails about your account or orders.

Complaints

If you have complaints about how we process your personal information, please contact us first at djfettburger@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of the alleged infringement. The supervisory authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), https://www.datenschutz-berlin.de.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

For questions about this Privacy Policy or to exercise your rights, contact us at djfettburger@gmail.com or by post at Peter Mitterer (Fett Burger Art), Wiener Straße 40, 10999 Berlin, Germany.